Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40936146B3F211F093E916E1DAE4EC9C.roa
File: 40936146B3F211F093E916E1DAE4EC9C.roa (raw, json)
Hash identifier: 4z8SNxD4JYXaKRT7YPRyaX3OFHb30bOcfHk64aF0hMw=
Subject key identifier: 18:A0:7B:2C:1C:31:2D:7D:76:20:18:42:F9:6C:AD:AD:D3:63:8B:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A5E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40936146B3F211F093E916E1DAE4EC9C.roa
Signing time: Tue 28 Oct 2025 11:35:50 +0000
ROA not before: Tue 28 Oct 2025 11:35:45 +0000
ROA not after: Sat 06 Dec 2025 11:35:45 +0000
asID: 15221
IP address blocks: 154.198.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108006 (0x1a5e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 11:35:45 2025 GMT
Not After : Dec 6 11:35:45 2025 GMT
Subject: CN=6900aa96-c1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:34:76:58:97:5f:9c:e7:1a:64:4a:a9:46:01:
98:c1:92:8d:df:7c:5a:b6:75:2a:61:a7:9d:1d:30:
bf:9f:05:ca:fd:75:4e:6b:9c:57:d7:bf:10:bd:72:
cb:fa:eb:fd:b6:89:2a:75:fb:20:88:2d:fb:31:9b:
0d:a1:b3:c9:dd:6c:a0:d1:32:ef:a2:2f:60:86:43:
2c:a2:c6:ee:e1:3d:e6:bd:f8:ae:8c:7e:34:84:e7:
1d:8b:32:fd:8e:04:f8:04:8d:68:fe:fa:d5:ee:0a:
95:15:be:98:0e:03:d2:c5:c0:c8:48:3f:94:9d:20:
49:97:1e:95:d6:91:1e:c5:15:ea:4f:63:32:8f:fb:
41:1d:d0:95:e4:b1:81:f0:3b:6d:6e:d1:04:8b:4c:
b7:50:d3:9a:6e:fa:ea:d1:ec:50:b2:38:0c:0e:03:
eb:e9:9f:ae:30:f7:38:c4:c7:cd:12:8a:a6:2e:1e:
96:e3:a8:9d:82:a2:eb:83:ec:c1:4b:c8:09:2a:ff:
a5:6b:95:89:1a:68:cf:bc:57:25:d0:16:c3:d5:31:
37:c3:9b:5e:e3:53:28:68:ff:b6:5d:69:65:ce:7a:
11:bf:e8:c8:ce:04:9c:5b:af:5d:5f:73:41:3b:83:
e6:6e:62:75:8e:aa:95:94:b6:bf:ec:51:3b:b4:05:
36:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A0:7B:2C:1C:31:2D:7D:76:20:18:42:F9:6C:AD:AD:D3:63:8B:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40936146B3F211F093E916E1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.32.0/22
Signature Algorithm: sha256WithRSAEncryption
37:30:ec:44:a7:67:35:a7:45:7a:ca:c4:d5:92:2b:b7:86:fd:
c7:48:13:e8:f9:16:87:bd:a1:b3:84:61:c7:7e:85:ee:a8:a6:
d6:ae:30:69:68:e8:a5:0e:a7:ed:d7:27:aa:2e:e4:a4:18:a3:
1e:ac:38:5b:f7:8c:5d:2f:35:c5:3d:db:e2:a6:98:99:e7:ab:
15:9d:15:e1:36:df:a2:99:c8:34:a8:7d:40:c1:60:71:0e:14:
32:31:d5:fc:ae:91:d1:de:7e:8e:7a:3d:09:2e:55:7d:0e:93:
2c:6e:66:a8:80:2d:4f:18:1d:59:eb:7c:1b:c7:51:a4:57:5c:
5d:f4:35:20:82:57:be:9e:95:00:66:79:48:80:f0:6d:eb:69:
8a:f4:e6:35:c8:72:c0:0a:86:ac:3f:8f:06:15:33:c4:6f:b7:
59:73:ec:43:cc:51:a1:1a:77:40:6f:03:64:8d:78:a6:cf:08:
a5:08:fa:32:70:76:4e:86:27:8f:c9:19:5d:39:f2:fb:6d:14:
b7:18:a1:08:c2:45:55:1d:15:96:92:05:1b:6d:a4:ac:b3:90:
22:f4:5b:74:a0:2a:eb:0e:9e:3c:e8:1b:4a:2e:ec:87:1f:8e:
1d:3d:c8:b4:f3:a2:1e:67:85:8e:06:4d:8a:b8:1d:6e:0f:8e:
17:8b:f1:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaXmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMDI4MTEzNTQ1WhcNMjUxMjA2MTEzNTQ1WjAYMRYw
FAYDVQQDEw02OTAwYWE5Ni1jMWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxDR2WJdfnOcaZEqpRgGYwZKN33xatnUqYaedHTC/nwXK/XVOa5xX178Q
vXLL+uv9tokqdfsgiC37MZsNobPJ3Wyg0TLvoi9ghkMsosbu4T3mvfiujH40hOcd
izL9jgT4BI1o/vrV7gqVFb6YDgPSxcDISD+UnSBJlx6V1pEexRXqT2Myj/tBHdCV
5LGB8DttbtEEi0y3UNOabvrq0exQsjgMDgPr6Z+uMPc4xMfNEoqmLh6W46idgqLr
g+zBS8gJKv+la5WJGmjPvFcl0BbD1TE3w5te41MoaP+2XWllznoRv+jIzgScW69d
X3NBO4PmbmJ1jqqVlLa/7FE7tAU2BwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBig
eywcMS19diAYQvlsra3TY4tyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MDkzNjE0NkIzRjIxMUYwOTNFOTE2RTFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmsYgMA0GCSqGSIb3DQEB
CwUAA4IBAQA3MOxEp2c1p0V6ysTVkiu3hv3HSBPo+RaHvaGzhGHHfoXuqKbWrjBp
aOilDqft1yeqLuSkGKMerDhb94xdLzXFPdvippiZ56sVnRXhNt+imcg0qH1AwWBx
DhQyMdX8rpHR3n6Oej0JLlV9DpMsbmaogC1PGB1Z63wbx1GkV1xd9DUggle+npUA
ZnlIgPBt62mK9OY1yHLACoasP48GFTPEb7dZc+xDzFGhGndAbwNkjXimzwilCPoy
cHZOhiePyRldOfL7bRS3GKEIwkVVHRWWkgUbbaSss5Ai9Ft0oCrrDp486BtKLuyH
H44dPci086IeZ4WOBk2KuB1uD44Xi/FP
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:40:03 2025 by rpki-client